General
-
Target
3132-16-0x00000000000A1000-0x0000000000109000-memory.dmp
-
Size
416KB
-
Sample
241212-1pv4eaylfw
-
MD5
fe1dc156fe70c338b55c1661c9166b90
-
SHA1
a6dc46ca766b88cecba2995e3a6042ec683ae27c
-
SHA256
1e6958c975e685270b1b71daa397c7dc7981bd310e68c2cf03e8b98e18d11153
-
SHA512
2eb03ca09c1487253219c33949477556badd9e838db420239080958c7a2dfcf113b574b8e53eafb5e00ec90a6412ba10ff2353645dcdf0a78e61ef50a45d2a8d
-
SSDEEP
12288:f+sWWEwpGhAwNTySgsrkRpJD/79ju40Mf:DywpEAC2BrJ9xf
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain